Security Advisory
CVE-2019-12370
6.1
MEDIUM
Vulnerability Description
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Published Date
March 18, 2020
Official Source
NIST NVD Advisory